Pixlr

Summary

Pixlr, a popular photo editing application owned by Inmagine, suffered a data breach affecting upwards of 1.9 million users. The stolen database was advertised for free on a hacking forum by threat actor ShinyHunters, who claims to have stolen the data from the company’s AWS bucket during the breach of another application owned by Inmagine. The exposed data includes email addresses, login usernames, hashed passwords, and country, as well as internal information such as whether a patron receives newsletters. Threat actors may use the exposed information in future cyberattacks, such as targeted phishing attacks. Pixlr patrons are urged to take precautionary measures and change associated passwords for this and any other account where the password was used. Additionally, users are reminded to exercise caution with unsolicited emails.